rfc5802 | mowblog

基于python3的SCRAM基础过程的描述，协议中定义的数据结构和类型此处并没有完整实现

import hashlib

import os

import hmac

import sys

def xor(str1, str2):

return b''.join((a^b).to_bytes(1, sys.byteorder) for a,b in zip(str1,str2))

#define the password, salt and iteration number

password = b'Aa123456'

salt = os.urandom(16)

i = 10000

#client first mesg

client_first_message_bare = os.urandom(32)

#server first mesg, contain client_nonce and its own nonce

server_first_message = os.urandom(32)

#generate client proof

SaltedPassword = hashlib.pbkdf2_hmac('sha256', password, salt, i)

ClientKey = hmac.new(SaltedPassword, b'Client Key', 'sha256').digest()

StoredKey = hashlib.sha256(ClientKey).digest()

AuthMessage = client_first_message_bare + server_first_message

ClientSignature = hmac.new(StoredKey, AuthMessage, 'sha256').digest()

ClientProof = xor(ClientKey, ClientSignature)

#client send the ClientProof and ClientSignature to the server

#server verify the client

s_ClientKey = xor(ClientSignature, ClientProof)

if hmac.compare_digest(ClientKey, s_ClientKey):

print('verify client success')

#generate server signature

ServerKey = hmac.new(SaltedPassword, b'Server Key', 'sha256').digest()

ServerSignature = hmac.new(ServerKey, AuthMessage, 'sha256').digest()

#client verify the server

#compare the ServerSignature received from server and the one computed at client side

c_ServerKey = hmac.new(SaltedPassword, b'Server Key', 'sha256').digest()

c_ServerSignature = hmac.new(c_ServerKey, AuthMessage, 'sha256').digest()

if hmac.compare_digest(ServerSignature, c_ServerSignature):

print('verify server success')

官方地址： https://tools.ietf.org/html/rfc5802

mowblog